Internet History
The forensic examination and analysis of user activity on the Internet can be the pivotal point of any case. With the increase in the use of computers by paedophiles and other criminals who commit crime on the Internet, it is vital for a forensic investigator to be able to extract this data and analyse it quickly and present the evidence in an understandable format.

In use by Law Enforcement agencies around the world, this tool is ideal for the analysis of the internet history data!  Some other forensic utilities only offer the ability to print the data, which can be many thousands of URLs. How do you sift through all that data, identifying the all important evidence? The answer is NetAnalysis! Powerful searching, filtering and evidence identification with targeted evidence presentation.

Viewing Cache Data
The Offline Cache viewer is a very powerful feature - NetAnalysis will automatically rebuild HTML web pages from an extracted cache, automatically adding the correct location of the graphics allowing you to view the page as the suspect did. NetAnalysis also allows you to easily view JPEG and other pictures that have been viewed by the suspect, straight from the cache!

The offline viewer can also be used as a viewer for forensic software such as Encase and iLook. It is a fast, sleek offline HTML viewer which supports Flash Movies, Graphics formats and various plug-ins to view PDF and Office Documents.
   

Auto Investigate Feature
NetAnalysis also has a unique feature to quickly identify possible child pornography sites, search criteria typed by the user, passwords and usernames and access to online storage.

NetAnalysis will automatically filter out possible search criteria. This allows you to separate this vital evidence and present it as a separate exhibit. How can the suspect claim he/she stumbled across the pictures by accident if you have pages and pages of search criteria looking for that material.

Extraction From Unallocated Space
Another unique feature is the ability to extract Internet History from Unallocated Space.  NetAnalysis comes with an Extractor designed to extract deleted history from Unallocated Space, Swap Files, File Slack, Unused Disk Space, Flat File Images, DD Images and any binary file that is suspected of containing history.  One recent case resulted in over 22 million records being recovered.

The history extractor will also extract history records DIRECTLY from a write protected physical or logical device.